Recently, Google detected a phishing campaign which tricked users into granting access to their address book. Fortunately, Google was able to halt the campaign quickly after detecting it. Here’s how the campaign worked: Users received an email invitation to a Google Doc with a link to a legitimate Google login page. This page contained a link to “continue to Google Docs.” By clicking on this link, the user granted ac